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CLAIMS 

1 . In a data network comprising a plurality of nodes, a method for transferring data 
packets between a source node and a destination node contained in the network, wherein 
the source node and destination node belong to the same virtual-local-area network 
(VLAN), the method comprising the steps of: 

establishing a virtual port associated with the destination node and a connection 
associated with the virtual port and the VLAN; 

acquiring a data packet from the source node, wherein the packet is associated 
with the VLAN and contains a destination address associated with the destination node; 
and 

transferring the packet to the destination node over the connection via the virtual 

port. 

2. A method as defined in claim 1 comprising the step of: 

applying a port identifier (ID) associated with the virtual port to an interface de- 
scriptor block (IDB) database to identify an IDB database entry associated with the vir- 
tual port. 

3. A method as defined in claim 2 wherein the identified IDB database entry con- 
tains a VLAN ID that represents the VLAN associated with the packet. 

4. A method as defined in claim 1 wherein the packet contains a VLAN ID that rep- 
resents the VLAN associated with the packet. 

5. A method as defined in claim 1 comprising the steps of: 

applying the destination address contained in the packet and a VLAN ID that 
identifies the VLAN associated with the packet to a forwarding database to locate a for- 
warding database entry that contains (i) a destination address that matches the destination 
address contained in the packet and (ii) a VLAN ID that matches the VLAN ID that 
identifies the VLAN associated with the packet; and 
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identifying a virtual port associated with the destination node using a port identi- 
fier contained in the matching forwarding database entry. 

6. A method as defined in claim 1 comprising the steps of: 

applying a port identifier (ID) associated with the virtual port to an interface de- 
scriptor block (IDB) database to identify an IDB database entry associated with the vir- 
tual port; 

locating a virtual port (VPORT) VLAN database using an address contained in 
the IDB database entry; 

applying a VLAN ID that identifies the VLAN associated with the packet to the 
VPORT VLAN database to locate a VPORT VLAN database entry that contains a VLAN 
ID that matches the VLAN ID that identifies the VLAN associated with the packet; 

encapsulating the packet; and 

transferring the encapsulated packet over a connection identified by a connection 
ID contained in the matching VPORT VLAN database entry. 

7. A method as defined in claim 6 wherein the packet is encapsulated in accordance 
with the Institute of Electrical and Electronics Engineers (IEEE) 802. 1Q standard. 

8. A method as defined in claim 6 comprising the steps of: 
acquiring the encapsulated packet; 

decapsulating the acquired encapsulated packet to yield the original packet; 

applying the destination address contained in the original packet to an address 
translation database to determine if the destination address matches an internal address 
contained in an entry in the database; and 

if so, replacing the destination address in the original packet with an external ad- 
dress contained in the matching entry. 

9. A method as defined in claim 1 wherein the connection is a point-to-point proto- 
col (PPP) connection. 
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10. A method as defined in claim 1 wherein the connection is an Asynchronous 
Transfer Mode (ATM) virtual connection (VC). 

11. A method as defined in claim 1 wherein the connection is a frame relay connec- 
tion. 

12. A method as defined in claim 1 wherein the connection is a trunked connection. 

13. A method as defined in claim 1 wherein the connection is associated with a con- 
nection identifier (ID). 

14. A method as defined in claim 13 comprising the step of: 

identifying an entry in a VLAN ID database that contains a virtual connection 
(V C) ID that matches the connection ID. 

15. A method as defined in claim 13 comprising the steps of: 
acquiring an encapsulated packet on the connection; 

identifying an internal VLAN ID associated with the connection's ID; and 
doubly encapsulating the encapsulated packet wherein the doubly encapsulated 
packet contains the internal VLAN ID. 

16. A method as defined in claim 15 wherein the doubly encapsulated packet is en- 
capsulated in accordance with the Institute of Electrical and Electronics Engineers (IEEE) 
802. 1Q standard. 

17. A method as defined in claim 1 5 comprising the steps of: 

applying a destination address contained in the doubly encapsulated packet to an 
address translation database to determine if the destination address matches an external 
address contained in an entry in the address translation database; and 

if so, replacing the destination address contained in the doubly encapsulated 
packet with an internal address contained in the matching entry. 
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18. In a data network comprising a plurality of nodes, a method for transferring data 
packets between a source node and a destination node contained in the network, wherein 
the source node and destination node belong to the same virtual-local-area network 
(VLAN), the method comprising the steps of: 

generating a data packet at the source node, wherein the data packet contains a 
destination address associated with the destination node; 

transferring the packet to a source intermediate node contained in the network; 

at the source intermediate node, (i) acquiring the packet, (ii) identifying a VLAN 
associated with the packet, (iii) identifying a virtual port through which the destination 
node may be reached, (iv) identifying a connection that is associated with the virtual port 
and the packet's VLAN, and (v) transferring the packet over the connection via the vir- 
tual port to a destination intermediate node contained in the network; and 

at the destination intermediate node, (i) acquiring the packet, (ii) identifying a port 
through which the destination node may be reached and (iii) forwarding the acquired 
packet to the destination node. 

19. A method as defined in claim 18 comprising the step of: 
at the source intermediate node, encapsulating the packet. 

20. A method as defined in claim 19 wherein the packet is encapsulated in accordance 
with the Institute of Electrical and Electronics Engineers (IEEE) 802. 1Q standard. 

21 . A method as defined in claim 1 8 wherein the connection is a point-to-point proto- 
col (PPP) connection. 

22. A method as defined in claim 18 wherein the connection is an Asynchronous 
Transfer Mode (ATM) virtual connection (VC). 

23. A method as defined in claim 18 wherein the connection is a frame relay connec- 
tion. 
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24. A method as defined in claim 18 wherein the connection is a trunked connection. 

25. An intermediate node comprising: 

a line card coupled to a network wherein the line card is configured to acquire 
data packets containing destination addresses; and 

a processor configured to (i) establish one or more virtual ports wherein each vir- 
tual port is associated with one or more connections and each connection is associated 
with a virtual-local-area network (VLAN), (ii) associate an acquired packet with a 
VLAN, (iii) identify a virtual port associated with a destination address contained in the 
acquired packet, (iv) identify a connection associated with the VLAN and (v) transfer the 
packet over the connection via the virtual port. 

26. An intermediate node as defined in claim 25 wherein the connections are a com- 
bination of connection types. 

27. A apparatus for transferring data packets between a source node and a destination 
node contained in a data network, wherein the source node and destination node belong 
to the same virtual-local-area network (VLAN), the apparatus comprising: 

means for establishing a virtual port associated with the destination node and a 
connection associated with the virtual port and the VLAN; 

means for acquiring a data packet from the source node, wherein the packet is as- 
sociated with the VLAN and contains a destination address associated with the destina- 
tion node; and 

means for transferring the packet to the destination node over the connection via 
the virtual port. 

28. A computer readable medium comprising computer executable instructions for 
execution in a processor, the medium comprising instructions for: 
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establishing a virtual port that is associated with a destination node, contained in a 
data network, and a connection associated with a virtual-local-area network (VLAN) and 
the virtual port; 

acquiring a data packet wherein the packet is associated with the VLAN and con- 
tains a destination address associated with the destination node; and 

transferring the packet to the destination node over the connection via the virtual 

port. 
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